Iris Ohyama breach may expose data of 7.7m people
Japanese manufacturer Iris Ohyama says a third-party cloud service used by its Iris Plaza store was accessed without permission, according to BleepingComputer.
The facts
- Iris Ohyama, the Japanese household goods maker behind the Iris Plaza online store, says personal data of about 7.7 million people may have been exposed after unauthorised access to an external cloud service.
- The company puts the impact at up to 5.8 million registered and former members and 1.9 million non-members. It is still working out how many records were taken.
- Passwords for active members are stored in encrypted form, though the company did not say which scheme it uses. No passwords are stored for former members, and credit card data was not in the affected cloud service.
- As of November 5, no misuse or financial loss had been reported. The store was suspended on October 28, and Japan's data protection commission and police were notified on October 29, according to the company. It says it has not identified the attacker or received direct contact from them.
Case notes · Danny's take
Why it matters
The weak point here was not the company's own shop. It was a third-party cloud service sitting behind it. That's the pattern to notice: you can run a tidy store and still lose customer data through a supplier you rarely think about. The company also hasn't said what encryption protects the passwords, and that detail decides how worried members should be.
For builders
Audit every external service that holds your customer data, not just your own servers. Check who has access, how access is logged, and how fast you would notice a suspicious file. Be specific about how you protect stored passwords, because users will ask.
Not financial advice. Do your own investigation.
This story was summarised with AI from BleepingComputer's reporting and checked against our editorial policy. Danny's take reflects his views. Disclaimer.
Danny Walter
Founder of Moon Republic, Volt Terminal and Moon Republic Academy. Author of The Market Is a Crime Scene and After the Applause.